24b16c413f13743f42d8a4cbe7914d9333f3d5e0cf8806a059bfdef9a1e9f2a8 | Triage

Sharing

General

Target

214bf04cb083088e4afec646145d4e06_JaffaCakes118
Size

2.5MB
Sample

240703-gldkeathjm
MD5

214bf04cb083088e4afec646145d4e06
SHA1

2e0564ce4319bdac18160d77914d126851a7bc9a
SHA256

24b16c413f13743f42d8a4cbe7914d9333f3d5e0cf8806a059bfdef9a1e9f2a8
SHA512

0ccc40238b8600519e3d1f64e14bf353a3dde1c1cfd9b5d8a2845abbf6388e6219846918b45e66c490eb8e9fbd13ed5bd804a53a34b89e8b4a8f40eceed4a98a
SSDEEP

49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1rg:o7AEvgVOy29Ls3JslVYzjMO26iZ

Score

7^/10

Malware Config

Targets

- Target
  
  214bf04cb083088e4afec646145d4e06_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  214bf04cb083088e4afec646145d4e06
- SHA1
  
  2e0564ce4319bdac18160d77914d126851a7bc9a
- SHA256
  
  24b16c413f13743f42d8a4cbe7914d9333f3d5e0cf8806a059bfdef9a1e9f2a8
- SHA512
  
  0ccc40238b8600519e3d1f64e14bf353a3dde1c1cfd9b5d8a2845abbf6388e6219846918b45e66c490eb8e9fbd13ed5bd804a53a34b89e8b4a8f40eceed4a98a
- SSDEEP
  
  49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1rg:o7AEvgVOy29Ls3JslVYzjMO26iZ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2